This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/ZQoXdMphcAyX_vSWGtLFp2lvoas.roa File: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (raw, json) Hash identifier: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s= Subject key identifier: 65:0A:17:74:CA:61:70:0C:97:FE:F4:96:1A:D2:C5:A7:69:6F:A1:AB Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Certificate serial: 019B7B36A9886FACC7C6A2590449A631A76D Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/ZQoXdMphcAyX_vSWGtLFp2lvoas.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41009 IP address blocks: 80.71.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a9:88:6f:ac:c7:c6:a2:59:04:49:a6:31:a7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=650a1774ca61700c97fef4961ad2c5a7696fa1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:15:61:2f:13:06:89:62:c8:a9:c9:c7:2a: 23:03:dd:84:8f:cc:af:36:60:3f:24:c8:65:12:49: d5:1b:f5:53:fd:e4:d9:78:72:35:c7:47:36:fa:e2: 89:ef:31:71:de:d9:be:e7:40:e3:49:c1:22:e1:f9: 96:00:54:45:3b:c7:96:01:4c:6d:18:39:f5:a6:03: 54:05:4e:93:ba:7c:01:03:f9:8d:b8:86:26:dd:28: 39:61:77:88:67:5d:d9:37:fe:f6:c8:ad:9e:65:13: aa:34:33:69:98:c3:06:cd:2d:e9:ac:2e:9c:a1:9c: 27:1e:95:16:56:a8:31:06:64:88:04:15:84:b7:fb: 61:75:d0:87:78:61:fb:5b:10:68:1e:d3:30:bd:28: 40:ff:92:db:d4:b1:19:18:a1:4c:c9:23:aa:2a:b3: e8:56:c7:ac:73:39:84:37:b0:1a:8c:7d:f8:34:27: bf:76:bc:0a:54:39:52:20:94:98:91:17:98:82:42: 52:f1:42:64:ae:15:11:91:5c:ef:96:78:72:41:45: da:28:0b:51:4c:d9:a3:59:3e:60:1d:d3:6a:8b:03: 26:50:74:4e:b8:30:74:0f:15:1d:33:5d:5a:9b:fc: e3:a9:d6:a6:bc:aa:e8:fa:12:c7:5b:59:48:ba:cf: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:17:74:CA:61:70:0C:97:FE:F4:96:1A:D2:C5:A7:69:6F:A1:AB X509v3 Authority Key Identifier: keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/ZQoXdMphcAyX_vSWGtLFp2lvoas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.158.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:cd:ad:4c:84:af:e8:27:d9:d6:ff:e8:20:c9:99:a6:5b:75: a3:4a:56:97:ea:9a:88:83:c1:d6:ff:e7:b4:98:6c:11:01:a5: bf:3d:75:fd:48:70:87:10:7d:1f:c9:52:41:fa:a9:d6:a3:dd: 90:4a:1b:78:14:f5:e0:3c:09:cb:e8:31:04:34:7f:fc:11:f3: fc:e6:07:74:c9:fd:5f:25:9d:24:31:c9:74:af:1d:80:9b:44: 9d:42:47:7f:a5:c9:f6:90:8a:9d:eb:4e:7f:0e:9a:fd:b5:50: 01:b8:31:87:33:a7:66:83:6c:94:c5:2d:2b:12:23:d0:e3:83: a4:5a:75:1a:80:ad:99:06:6d:33:fd:82:c4:f8:6e:af:ed:39: a9:c9:37:ee:25:f6:95:fd:63:76:c9:79:12:e6:96:25:4b:e7: 5d:b5:c5:61:b6:3a:a0:f9:27:6c:43:bf:9a:bd:ad:07:bd:6a: 48:00:e2:dd:a8:3e:5a:df:c3:d5:77:0b:6a:b2:07:d9:d3:24: c4:36:42:49:59:66:d7:7c:65:1a:e0:ed:8e:ba:3e:f6:5b:c8: 88:7d:6f:46:8b:39:da:7e:47:37:c2:1b:cc:2f:2c:67:26:08: 9c:f5:bc:15:8c:13:3e:58:90:37:d4:57:36:60:fa:ae:d7:a2: 67:02:5d:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqmIb6zHxqJZBEmmMadtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw Njk3ZDkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTBhMTc3NGNhNjE3MDBjOTdmZWY0OTYxYWQyYzVhNzY5NmZhMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+gVYS8TBoliyKnJxyojA92Ej8yv NmA/JMhlEknVG/VT/eTZeHI1x0c2+uKJ7zFx3tm+50DjScEi4fmWAFRFO8eWAUxt GDn1pgNUBU6TunwBA/mNuIYm3Sg5YXeIZ13ZN/72yK2eZROqNDNpmMMGzS3prC6c oZwnHpUWVqgxBmSIBBWEt/thddCHeGH7WxBoHtMwvShA/5Lb1LEZGKFMySOqKrPo VsesczmEN7AajH34NCe/drwKVDlSIJSYkReYgkJS8UJkrhURkVzvlnhyQUXaKAtR TNmjWT5gHdNqiwMmUHROuDB0DxUdM11am/zjqdamvKro+hLHW1lIus9ZoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUKF3TKYXAMl/70lhrSxadpb6GrMB8GA1UdIwQY MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt Mzk2YmM3MjBlMmI0LzEvWlFvWGRNcGhjQXlYX3ZTV0d0TEZwMmx2b2FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0 LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEeeMA0G CSqGSIb3DQEBCwUAA4IBAQBeza1MhK/oJ9nW/+ggyZmmW3WjSlaX6pqIg8HW/+e0 mGwRAaW/PXX9SHCHEH0fyVJB+qnWo92QSht4FPXgPAnL6DEENH/8EfP85gd0yf1f JZ0kMcl0rx2Am0SdQkd/pcn2kIqd605/Dpr9tVABuDGHM6dmg2yUxS0rEiPQ44Ok WnUagK2ZBm0z/YLE+G6v7TmpyTfuJfaV/WN2yXkS5pYlS+ddtcVhtjqg+SdsQ7+a va0HvWpIAOLdqD5a38PVdwtqsgfZ0yTENkJJWWbXfGUa4O2Ouj72W8iIfW9Gizna fkc3whvMLyxnJgic9bwVjBM+WJA31Fc2YPqu16JnAl22 -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:45 2026 by rpki-client